Crashed in 72 Hours: OpenClaw Update Backstabs WeChat Lobster Plugin

According to 1M AI News monitoring, the official OpenClaw plugin ClawBot launched on WeChat last weekend went offline after just 72 hours due to a plugin system overhaul in OpenClaw version 2026.3.22.

In this update, OpenClaw removed the original unified entry point `openclaw/plugin-sdk`, forcing plugins to use segmented paths (e.g., `openclaw/plugin-sdk/core`) for on-demand loading, and did not provide any compatibility transition plan. The officials stated that this was done to improve startup speed, reduce memory usage, and block a potential cross-package escape vulnerability that could be exploited by malicious plugins.

The WeChat ClawBot plugin, due to hard-coded references to the old path in its code, threw a direct error after the update, stating "Cannot find module 'openclaw/plugin-sdk'", rendering it unable to load. Chat application plugins for Enterprise WeChat, Feishu, and the like were similarly affected. OpenClaw also issued a "WARNING: Dangerous Code Patterns" alert for these plugins, warning of potential credential harvesting risks arising from combinations of environment variable access and network transmissions. The QQ Bot plugin remains unaffected and functions normally.

WeChat responded that they will promptly release a fix, with only users who have upgraded to the latest version of OpenClaw being affected. The community's opinions on this matter are divided: some criticize WeChat for not being familiar with the iterative pace of the open-source ecosystem, while others point out that OpenClaw's API design itself is not sufficiently stable. The generally accepted responsible practice is to first mark old interfaces as "deprecated," retain them for a transitional period, and then proceed with deletion.